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What is claimed is: 
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1. An encryption method for use by an encryption apparatus 
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a block obtaining step for obtaining the plaintext 




K 


r\^i- ^ on^ "hi nnV ^ "h ^ "h H ttip^ in nTdpr from outside the 






^ 1 1 ^ iL y -1- V-/1 1 CL k^^^ CL -1- d ^ d ii^ f 




7 


a G £a 1 o "i n rr c^'hf^'n "For* *=; p "Lf^ctincr either a first mode 




Q 
O 


iOY* a Gor'OTiH mr^Ho "For* ^ o n r* n "h V^l ooV oV^1~^"i "nP^H 1 Ti "hhp V^l ook" 


Q 


Q 


/^"K-hrs-i -n n -n c; +- o-ni 3r^r^oY*Hi Ti rr "ho h 0Ta7 Tn^n\/ hi OoVq h^^'^^P hPPH 

C^X..? UCL J. XIJ-XIU O L.C^kJ CH— V— ^ 0- V-1 X 1 1 y IH^W lllCLliy X-/-H-/^JS.O llO. V C X^Cdl 


UJ 






m 


1 1 


^ "Sr c^\7 rrom o r*^ +* "i Tirr ^"h^o "For" rr^n P "PPi i" "i Tirr 

a JvtSV yt5XXcX.Cll LXXy O L.C^^ J-VJJ- y die? J- a U. -L-liy 




1 9 


i \ ^ "Ft "tcjI" ryroiTD oomDospd of r5 DTpdp"hPTTn"i npd 

I _L y CL X. JL X O y X. w U ki' Vim/1 L Ik./ V^ O \^ ^ U kx/ ^ ^ l_ ^ ILL^ 11 ^ 


o 




number n of different subkeys when the first 






ttioHp 1 «^p1 po"hpd- and 






p\ c'Ckz-'onH rrTour) coniDOsed of less than n 


Q 


1 ft 
ID 


Hn "F'F^'r^nl" Qnhk'Pwc; whpn "hhp spoond inodp i^ 

J. J_ X J- dl L- OLlX^JVCy O Wlldl U«llw Ow^WllV^ ILLV^^wl^ ^ 




17 


O C _L " L, C \Ji f G^\.V<Ji 




18 


an encrypting step for encrypting the current block 
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is associated with a different subkey in the first group 
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and is performed using the associated subkey, and 
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in the second mode, the n conversion processes are 
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associated with subkeys in the second group and are each 
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performed using the associated subkey. 



2. An encryption method according to Claim 1, 

wherein the selecting step selects 

(i) the first mode for blocks whenever a number 
of blocks that have been obtained is equal to 
a multiple of a predetermined value, and 

(ii) the second mode for all other cases. 

3. An encryption method according to Claim 1, 

wherein the encryption apparatus includes an initial 
value storing means for storing an initial value, 

the encrypting step encrypts the current block to 
generate a ciphertext block having a predetermined length, 
and 

the key generating step generates the first group 
using the initial value in the first mode and generates 
the second group using the initial value and the ciphertext 
block most recently generated by the encrypting step in 
the second mode. 

4. An encryption apparatus for encrypting plaintext data 
composed of a plurality of blocks, the encryption apparatus 
comprising : 

block obtaining means for obtaining the plaintext 
data one block at a time in order from outside; 

selecting means for selecting either a first mode or 
a second mode for use with a current block obtained in the 
block obtaining means according to how many blocks have 
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9 been obtained; 

10 key generating means for generating 

11 (1) a first group composed of a predetermined 

12 number n of different subkeys when the first 

13 mode is selected^ and 

14 (2) a second group composed of less than n 

15 different subkeys when the second mode is 

16 selected; and 

17 encrypting means for encrypting the current block by 
5 18 subjecting the current block to n conversion processes in 
Ly 19 order, wherein 
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m 20 in the first mode, each of the n conversion processes 

m 21 is associated with a different subkey m the first group 

22 and is performed using the associated subkey, and 
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rf 23 in the second mode, the n conversion processes are 



24 each associated with a subkey in the second group and are 

25 each performed using the associated subkey. 

1 5. A computer-readable storage medium storing an 

2 encryption program for use by a computer that encrypts 

3 plaintext data composed of a plurality of blocks, 

4 the encryption program comprising: 

5 a block obtaining step for obtaining the plaintext 

6 data one block at a time in order from outside the 

7 encryption apparatus; 

8 a selecting step for selecting either a first mode 

9 or a second mode for a current block obtained in the block 
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is associated with a different subkey in the first group 
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and is performed using the associated subkey, and 
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in the second mode, the n conversion processes are 
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associated with subkeys in the second group and are each 
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performed using the associated subkey. 



1 6. A decryption method for use by a decryption apparatus 

2 that decrypts ciphertext data in ciphertext block units, 

3 the decryption method comprising: 

4 a block obtaining step for obtaining the ciphertext 

5 data one ciphertext block at a time in order from outside 

6 the decryption apparatus; 

7 a selecting step for selecting either a first mode 

8 or a second mode for use with a current ciphertext block 
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9 obtained in the block obtaining step according to how many 

10 ciphertext blocks have been obtained; 

11 a key generating step for generating 

12 (1) a first group composed of a predetermined 

13 number n of different subkeys when the first 

14 mode is selected and 

15 (2) a second group composed of less than n 

16 different subkeys when the second mode is 

17 selected; and 

O 18 a decrypting step for decrypting the current 

ff; 19 ciphertext block by subjecting the current ciphertext 

W 20 block to n conversion processes in order, wherein 

21 in the first mode, each of the conversion processes 

r 22 is associated with a different subkey in the first group 

m 23 and is performed using the associated subkey, and 
ip. 24 in the second mode, the n conversion processes are 

S 25 associated with subkeys in the second group and are each 

26 performed using the associated subkey. 

1 7. A decryption method according to Claim 6, 

2 wherein the selecting step selects 

3 (1) the first mode whenever a number of 

4 ciphertext blocks that have been obtained is 

5 given as a multiple of a predetermined value, 

6 and 

7 (2) the second mode for all other cases. 
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(2) a second group composea or xess unan n 
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different subkeys when the second mode is 
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selected; and 
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decrypting means for decrypting the current 
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ciphertext block by subjecting the current ciphertext 
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19 block to n conversion processes in order, wherein 

20 in the first mode, each of the n conversion processes 

21 is associated with a different subkey in the first group 

22 and is performed using the associated subkey, and 

23 in the second mode, the n conversion processes are 

24 associated with subkeys in the second group and are each 

25 performed using the associated subkey. 

1 10. A computer-readable storage medium storing a 

O 2 decryption program for use by a computer that decrypts 

yi 3 ciphertext data in ciphertext block units, 
ffl 4 the decryption program comprising: 

M, 5 a block obtaining step for obtaining the ciphertext 

7' 6 data one ciphertext block at a time in order from outside 

^ 7 the decryption apparatus; 

fl 8 a selecting step for selecting either a first mode 

y 1 

y 9 or a second mode for use with a current ciphertext block 

10 obtained in the block obtaining step according to how many 

11 ciphertext blocks have been obtained; 

12 a key generating step for generating 

13 (1) a first group composed of a predetermined 

14 number n of different subkeys when the first 

15 mode is selected and 

16 (2) a second group composed of less than n 

17 different subkeys when the second mode is 

18 selected; and 

19 a decrypting step for. decrypting the current 
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20 ciphertext block by subjecting the current ciphertext 

21 block to n conversion processes in order, wherein 

22 in the first mode, each of the n conversion processes 

23 is associated with a different subkey in the first group 

24 and is performed using the associated subkey, and 
in the second mode, the n conversion processes are 

associated with subkeys in the second group and are each 
27 performed using the associated subkey. 
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